How to recover files after a quick format

Quick format, full format, and what your camera does

The word "format" covers four operations with very different consequences for your data.

The one to be careful about is the full format, and it is not the one people usually reach for: in the Windows format dialog, "Quick format" is ticked by default, and unticking it is what triggers the slow, destructive kind. If your format finished in a couple of seconds, it was quick.

What to do now

1. Do not copy anything onto the formatted drive. To Windows the volume is now empty, so anything written to it will be placed exactly where your old files are. This is the single way to turn a recoverable format into a permanent one.
2. Unplug it, or stop using it. A card or external drive should come out. A formatted internal partition should simply be left alone.
3. Install the recovery software on a different drive, and point it at the formatted volume.
4. Scan read-only and look at what comes back before deciding anything. You will see file names where the old table could be reconstructed, and numbered files where it could not.
5. Save the results to another drive, then open a sample of them. Only when you are satisfied should the formatted drive be reused.

Why the files are still there, and how they are found

A file system is an index plus your data. Formatting replaces the index. On a 1 TB drive that is a few megabytes of writing against a terabyte of untouched content — which is why the operation takes a second and why the data survives it.

Finding that data again is done two ways, and the difference decides whether your file names come back.

Rebuilding the old table

On NTFS, the records of the old Master File Table are usually still physically present on the volume; the format wrote a new table somewhere and marked everything free, but it did not scrub the old records. Each record is recognisable by its own signature. Sweeping the volume for those signatures and rebuilding a table out of them is the difference between handing your files back with their names and folders, and handing them back as file0001.jpg. Unlost does this sweep whenever there is no usable table left, which is exactly the situation a reformat leaves.

Recognising files by their contents

Where no table can be reconstructed — a formatted FAT32 or exFAT card, most often — files are found by the bytes they begin with. Every format has a distinctive header, and many carry their own length, so the file can be read out at its true size rather than guessed at. Unlost recognises 64 types this way, including JPEG, HEIC, PNG, the camera raw formats, MP4, PDF and the Office formats.

This method has one structural limit worth knowing before you see the results: it can only follow a file while the file is continuous on the disk. A photograph almost always is. A large video on a drive that was nearly full, or a document edited many times, may not be — and there is no index left to say where the other pieces went.

What the results will look like

• Photos and videos: the best case. Written once, continuous on the disk, and recognisable by content. They generally come back complete.
• File names: often recovered on a formatted NTFS volume, rarely on a formatted card. Where a name cannot be established, files arrive numbered and grouped by type.
• Folder structure: the same story. Where the parent folder cannot be worked out, files land in one folder marked [unknown folder] rather than being sorted into a plausible but invented path.
• Files whose length is not stored in the format itself are capped and marked as partial, so a guessed size is never presented as a measured one.

The cases where a format is not recoverable

• A full format on Windows 10 or 11. Since Windows Vista the non-quick format writes zeros over the whole volume. There is nothing left to read.
• A format followed by use. If you formatted the drive and then copied a photo library onto it, whatever landed on your old files is gone and the rest is not. A scan will show you which is which.
• A formatted internal SSD. Windows tells an SSD that a formatted volume's blocks are free, and the drive erases them by itself shortly afterwards. Formatted SSDs are usually not recoverable, and that is a property of the hardware rather than of the software you choose.
• A Windows reinstall. The install itself writes many gigabytes over the front of the volume. Personal files further along may still be there; anything the installation landed on is not.

Questions about formatted drives

Does formatting a drive erase the data on it?

A quick format does not — it replaces the index and leaves the data. A full format on Windows 10 or 11 does, because it writes zeros over every sector. The dialog's "Quick format" tick box is what decides which one you get.

I formatted the wrong drive. Can I undo it?

There is no undo, but if it was a quick format and you have not written to the drive since, the contents are almost certainly still there and can be read back. Stop using the drive and scan it read-only.

I formatted from NTFS to exFAT. Does that change anything?

Only the index that was written on top. The old data is untouched either way, and the new file system does not know it is there — which is why recovery reads the volume underneath the file system rather than through it.

Windows asked me to format a drive and I did. What now?

The same procedure applies: stop using it and scan it. Worth knowing for next time, though — that message usually means a damaged file system on a drive full of intact files, and it is possible to get the files off without formatting at all. The steps are in the drive asks to be formatted, or shows up as RAW.

Can I format the drive again to fix it, after recovering?

Yes — once the recovered files are safely on another drive and you have opened them. Formatting is a reasonable last step. It is only destructive when it comes first.